On Tue, Jan 23, 2018 at 11:37:26AM -0800, Diane Trout wrote: > > > > > Thanks for your contribution. However note that we cannot use your > > packaging > > for the official Debian package, because AFAIK npm downloads the > > javascript > > libraries at build time, which is clearly not acceptable in Debian. > > The full > > source needs to be included in the tarball (and the package needs to > > be > > buildable without network access). > > > > I'm a Debian Developer too so know about the need to build in a chroot > with no network. I'd was confused how to update get-orig-source, and > saw others had been too, so I wanted to leave some documentation about > what I'd tried. > > zotero wont build with the version of npm in Debian, so I spent some > time experimenting with npm 5.6 to see if I could get that to build. > > I learned npm 5.6 has a "prefer-offline" option that appears to prefer > locally installed Debian packages.
Thanks, I was not aware of that option, it indeed seems like a good way to go forward. > I was able to build a .deb file for npm 5.6, but the resulting install > doesn't work. I think the install file is missing something. > > There are still some embedded copies of code that don't have a Debian > equivalent. Although I did see that the Debian JS team shipped 1.4.21 > with some embedded copies of code, so that might not be a deal breaker. > I need to get in touch with them As already discussed in this bug, I also think it's ok to have a few embedded code copies as a temporary solution. So I understand from your message that the main blocker is now to have npm updated. -- ⢀⣴⠾⠻⢶⣦⠀ Sébastien Villemot ⣾⠁⢠⠒⠀⣿⡁ Debian Developer ⢿⡄⠘⠷⠚⠋⠀ http://sebastien.villemot.name ⠈⠳⣄⠀⠀⠀⠀ http://www.debian.org
signature.asc
Description: PGP signature

